API Documentation

Interactive OpenAPI reference for the Osmesys Reporting platform.

Authentication

Obtain a JWT via POST /api/auth/login with email, password, and tenant_slug. Send it as Authorization: Bearer <token> on protected routes.

curl -X POST https://reporting.osmesys.com/api/auth/login \
  -H "Content-Type: application/json" \
  -d '{"email":"you@firm.com","password":"…","tenant_slug":"acme"}'

Rate limits

Login and register are IP-rate-limited. Public verify and share endpoints are limited to 60 requests per minute per IP.

  • Login: 10 / minute / IP
  • Register: 5 / hour / IP
  • Public verify & share: 60 / minute / IP

Interactive explorer

openapi.json